A1RO Ltd (trading as A1RO, registered in Ireland) is the data controller for personal data collected through a1ro.ie and its products. Our registered address is on file with the Companies Registration Office, Ireland.
Contact us at kevin@a1ro.ie for any data-related queries.
We operate two products. The data collected depends on which product you use.
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, email, company, job role | Issue your certificate; identify you in the course | Contract (Article 6(1)(b)) |
| Quiz answers, checklist responses | Assess competency; generate pass/fail result | Contract |
| Practical lift video | Trainer review of technique before cert is issued | Contract |
| Language preference | Display course in English or Romanian | Legitimate interest (Article 6(1)(f)) |
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, phone, email | Contact candidate; identify record | Legitimate interest of the employer client |
| CV | Verify experience against role requirements | Legitimate interest |
| Right-to-work document | Verify legal eligibility to work in Ireland | Legal obligation (Article 6(1)(c)) / Legitimate interest |
| Screening conversation transcript | Allow recruiter to review responses | Legitimate interest |
| Availability, interview preferences | Schedule interviews | Legitimate interest |
| Data type | Retention period | Reason |
|---|---|---|
| SafeHandle registration & cert records | 4 years | Matches HSA-recommended 3-year renewal cycle plus 1 year |
| Practical lift video | 12 months after cert issued | Audit trail in case of dispute; deleted after |
| Quiz and checklist answers | 4 years with cert record | Evidence of competency assessment |
| Screening conversation & contact details | 12 months | Active recruitment cycle; deleted if not placed |
| Right-to-work documents | 3 months after placement decision | Verification complete; no further need |
| CV | 12 months | In case of future suitable roles |
We use the following sub-processors. All are bound by data processing agreements.
| Provider | Role | Location | Transfer mechanism |
|---|---|---|---|
| Vercel Inc. | Hosting, serverless functions, file storage (Vercel Blob) | US | Standard Contractual Clauses (SCCs) |
| Upstash Inc. | Database (Redis) — stores candidate and submission records | US/EU | SCCs |
| Anthropic PBC | AI model provider — processes screening conversation text and course chat | US | SCCs. Anthropic does not use API inputs to train its models. |
| Resend Inc. | Transactional email (decision notifications, cert emails) | US | SCCs |
For the screening product, employer clients (e.g. Dangan Group) receive candidate records as joint controllers or independent controllers under a separate data processing agreement.
A1RO does not use cookies. The SafeHandle course stores your language preference in localStorage — this is local to your browser only and is never transmitted to our servers or any third party.
Under GDPR (Articles 15–22) you have the right to:
To exercise any right, email kevin@a1ro.ie. We will respond within one month.
If you are unsatisfied with our response you may lodge a complaint with the Data Protection Commission (DPC): dataprotection.ie · +353 57 868 4800.
Data is stored in encrypted databases (Upstash Redis) and files are stored on Vercel Blob with access controls. All data is transmitted over HTTPS. Admin access to candidate records is protected by password authentication.
In the event of a personal data breach we will notify the DPC within 72 hours where required and notify affected individuals without undue delay.
We will update this policy when our data practices change. Material changes will be notified by email where we hold your contact details. The effective date at the top of this page will always reflect the current version.
A1RO Ltd · kevin@a1ro.ie · a1ro.ie